Allow archive redirects from http:// to https://

In case a community compatible cookbook server is deployed without SSL
encryption (internal network), redirects from http:// to https:// can
happen which are not allowed by open-uri.

This change uses httpclient library instead which provides the same
functionality without the redirect limitation.
Fix extraction of git tar archives

Git created tar archives include a pax_global_header as extended
headers. Some tar versions, including libarchive, extract that header as
regular file.

This change ignores all files and uses the first directory.
Merge branch 'fix-path-constraint'